Lucene search
Rapid7CVELIST:CVE-2017-5257HistoryDec 20, 2017 - 10:00 p.m.
CVE-2017-5257
2017-12-2022:00:00
CWE-79
rapid7
www.cve.org
0.001 Low
EPSS
Percentile
21.6%
In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses) the SNMP read/write (RW) community string can insert XSS strings in certain SNMP OIDs which will execute in the context of the currently-logged on user.
CNA Affected
[
{
"product": "ePMP",
"vendor": "Cambium Networks",
"versions": [
{
"status": "affected",
"version": "3.5 and prior"
}
]
}
]Related
nvd
nvd
CVE-2017-5257
2017-12-20 22:29:00
cve
cve
CVE-2017-5257
2017-12-20 22:29:00
prion
prion
Design/Logic Flaw
2017-12-20 22:29:00